Senior Microsoft Cloud Security Architect

Relha LLC; Arlington, Northern (VA, KY); Hybrid; USD 132,000 - 290,000; Full time

Job summary

CACI is seeking a Senior Microsoft Cloud Security Engineer to deploy, manage, and harden our Microsoft cloud environment, including Azure, Office 365 and Microsoft 365. You will collaborate with security engineers, cloud architects, identity teams, and incident response analysts to ensure our tenant is resilient and compliant.

The role requires expert knowledge of CAPs, Defender, Purview, and Azure Sentinel; a track record of secure cloud design and strong communication skills.

Qualifications

• Ability to Obtain DHS EOD Public Trust Clearance.
• Advanced degree with extensive cloud security expertise.
• Expert Microsoft cloud deployment, management, and security.
• Deep knowledge of Conditional Access and Zero Trust concepts.
• Proven Defender, Purview, and DLP/eDiscovery experience.
• Strong KQL skills for detection, investigation, and response.
• Relevant security certifications such as MSCE, etc.

Responsibilities

• Secure Microsoft cloud tenant across Azure, O365, and M365.
• Lead development and enforcement of Conditional Access Policies.
• Optimize Defender for Endpoint/Cloud/Identity/Office 365.
• Implement Purview with DLP and eDiscovery workflows.
• Design and run KQL queries for Azure Sentinel and log analytics.
• Remediate security controls via assessments and pentests.
• Guide cross‑functional teams on governance and compliance.

Skills

Azure

Entra

Defender

Purview

Office 365

Microsoft 365

KQL

Zero Trust

CAPs

Security certifications

Cloud security

Threat hunting

Education

Master’s Degree + 10 years’ experience

Bachelor’s degree + 13 years

19 years total experience

Tools

Splunk

Microsoft Sentinel

CASBs

NIST frameworks

Job description

CACI is seeking a Senior Microsoft Cloud Security Engineer to deploy, manage, and harden our Microsoft cloud environment, including Azure, Office 365 and Microsoft 365. You will collaborate with security engineers, cloud architects, identity teams, and incident response analysts to ensure our tenant is resilient and compliant.

The role requires expert knowledge of CAPs, Defender, Purview, and Azure Sentinel; a track record of secure cloud design and strong communication skills.